@authup/server-core 1.0.0-beta.41 → 1.0.0-beta.42

package/dist/utils/error.d.ts

@@ -1,3 +1,16 @@
 import { AuthupError } from '@authup/errors';
+/**
+ * Normalize an unknown error to an AuthupError. Recognised shapes:
+ *
+ * 1. AuthupError instance              → returned as-is
+ * 2. EntityRelationLookupError         → BAD_REQUEST AuthupError
+ * 3. validup Issue error               → BAD_REQUEST AuthupError carrying issues
+ * 4. foreign @ebec/http HTTPError      → AuthupError with the closest semantic code
+ * 5. driver error w/ a recognised code → ENTITY_CONFLICT or STORAGE_INSUFFICIENT
+ * 6. anything else                     → INTERNAL_ERROR AuthupError
+ *
+ * The HTTP-status concern is handled separately by `httpStatusFromCode` in
+ * the adapter — this function only assigns a semantic `code`.
+ */
 export declare function sanitizeError(input: unknown): AuthupError;
 //# sourceMappingURL=error.d.ts.map

package/dist/utils/error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../src/utils/error.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAK7C,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAI,WAAW,CA6E1D"}
+{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../src/utils/error.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,WAAW,EAId,MAAM,gBAAgB,CAAC;AAMxB;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAoEzD"}

package/dist/utils/error.mjs

@@ -1,31 +1,40 @@
 import { hasOwnProperty, isObject } from "@authup/kit";
-import { BadRequestErrorOptions, ConflictErrorOptions, HTTPError, InsufficientStorageErrorOptions, InternalServerErrorOptions } from "@ebec/http";
-import { AuthupError } from "@authup/errors";
+import { AuthupError, ErrorCode, codeFromHttpStatus, isAuthupError } from "@authup/errors";
 import { buildErrorMessageForAttributes, isValidupError, stringifyPath } from "validup";
 import { EntityRelationLookupError } from "typeorm-extension";
+import { isHTTPError } from "@ebec/http";
 //#region src/utils/error.ts
-function sanitizeError(input) {
-	if (input instanceof AuthupError) return input;
+/**
+* Normalize an unknown error to an AuthupError. Recognised shapes:
+*
+* 1. AuthupError instance              → returned as-is
+* 2. EntityRelationLookupError         → BAD_REQUEST AuthupError
+* 3. validup Issue error               → BAD_REQUEST AuthupError carrying issues
+* 4. foreign @ebec/http HTTPError      → AuthupError with the closest semantic code
+* 5. driver error w/ a recognised code → ENTITY_CONFLICT or STORAGE_INSUFFICIENT
+* 6. anything else                     → INTERNAL_ERROR AuthupError
+*
+* The HTTP-status concern is handled separately by `httpStatusFromCode` in
+* the adapter — this function only assigns a semantic `code`.
+*/ function sanitizeError(input) {
+	if (isAuthupError(input)) return input;
 	if (input instanceof EntityRelationLookupError) return new AuthupError({
-		status: BadRequestErrorOptions.status,
-		code: BadRequestErrorOptions.code,
+		code: ErrorCode.ENTITY_RELATION_INVALID,
 		message: input.message,
 		stack: input.stack
 	});
 	if (isValidupError(input)) {
 		const paths = input.issues.map((issue) => stringifyPath(issue.path));
 		const error = new AuthupError({
-			status: BadRequestErrorOptions.status,
-			code: BadRequestErrorOptions.code,
+			code: ErrorCode.BAD_REQUEST,
 			stack: input.stack,
 			message: input.message || buildErrorMessageForAttributes(paths)
 		});
 		error.issues.push(...input.issues);
 		return error;
 	}
-	if (input instanceof HTTPError) return new AuthupError({
-		status: input.status,
-		code: input.code,
+	if (isHTTPError(input)) return new AuthupError({
+		code: codeFromHttpStatus(input.status),
 		message: input.message,
 		stack: input.stack
 	});
@@ -36,29 +45,23 @@ function sanitizeError(input) {
 			case "23505":
 			case "ER_DUP_ENTRY":
 			case "SQLITE_CONSTRAINT_UNIQUE": return new AuthupError({
-				status: ConflictErrorOptions.status,
-				code: ConflictErrorOptions.code,
-				message: "An entry with some unique attributes already exist.",
+				code: ErrorCode.ENTITY_CONFLICT,
+				message: "An entry with some unique attributes already exists.",
 				stack: input.stack
 			});
 			case "ER_DISK_FULL": return new AuthupError({
-				status: InsufficientStorageErrorOptions.status,
-				code: InsufficientStorageErrorOptions.code,
-				message: "No database operation possible, due the leak of free disk space.",
+				code: ErrorCode.STORAGE_INSUFFICIENT,
+				message: "No database operation possible, due to the lack of free disk space.",
 				stack: input.stack
 			});
 		}
 		return new AuthupError({
-			status: InternalServerErrorOptions.status,
-			code: InternalServerErrorOptions.code,
+			code: ErrorCode.INTERNAL_ERROR,
 			message: input.message,
 			stack: input.stack
 		});
 	}
-	return new AuthupError({
-		status: InternalServerErrorOptions.status,
-		code: InternalServerErrorOptions.code
-	});
+	return new AuthupError({ code: ErrorCode.INTERNAL_ERROR });
 }
 //#endregion
 export { sanitizeError };

package/dist/utils/error.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"error.mjs","names":["BadRequestErrorOptions","ConflictErrorOptions","HTTPError","InsufficientStorageErrorOptions","InternalServerErrorOptions","AuthupError","EntityRelationLookupError","buildErrorMessageForAttributes","isValidupError","stringifyPath","hasOwnProperty","isObject","sanitizeError","input","status","code","message","stack","paths","issues","map","issue","path","error","push","undefined"],"sources":["../../src/utils/error.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    BadRequestErrorOptions,\n    ConflictErrorOptions,\n    HTTPError,\n    InsufficientStorageErrorOptions,\n    InternalServerErrorOptions,\n} from '@ebec/http';\nimport { AuthupError } from '@authup/errors';\nimport { EntityRelationLookupError } from 'typeorm-extension';\nimport { buildErrorMessageForAttributes, isValidupError, stringifyPath } from 'validup';\nimport { hasOwnProperty, isObject } from '@authup/kit';\n\nexport function sanitizeError(input: unknown) : AuthupError {\n    if (input instanceof AuthupError) {\n        return input;\n    }\n\n    if (input instanceof EntityRelationLookupError) {\n        return new AuthupError({\n            status: BadRequestErrorOptions.status,\n            code: BadRequestErrorOptions.code,\n            message: input.message,\n            stack: input.stack,\n        });\n    }\n\n    if (isValidupError(input)) {\n        const paths = input.issues.map((issue) => stringifyPath(issue.path));\n        const error = new AuthupError({\n            status: BadRequestErrorOptions.status,\n            code: BadRequestErrorOptions.code,\n            stack: input.stack,\n            message: input.message || buildErrorMessageForAttributes(paths),\n        });\n\n        error.issues.push(...input.issues);\n        return error;\n    }\n\n    if (input instanceof HTTPError) {\n        return new AuthupError({\n            status: input.status,\n            code: input.code,\n            message: input.message,\n            stack: input.stack,\n        });\n    }\n\n    if (isObject(input)) {\n        const code = hasOwnProperty(input, 'code') &&\n        typeof input.code === 'string' ?\n            input.code :\n            undefined;\n\n        /**\n         * @see https://dev.mysql.com/doc/mysql-errors/8.0/en/server-error-reference.html\n         */\n        switch (code) {\n            case '23505':\n            case 'ER_DUP_ENTRY':\n            case 'SQLITE_CONSTRAINT_UNIQUE': {\n                return new AuthupError({\n                    status: ConflictErrorOptions.status,\n                    code: ConflictErrorOptions.code,\n                    message: 'An entry with some unique attributes already exist.',\n                    stack: input.stack,\n                });\n            }\n            case 'ER_DISK_FULL':\n                return new AuthupError({\n                    status: InsufficientStorageErrorOptions.status,\n                    code: InsufficientStorageErrorOptions.code,\n                    message: 'No database operation possible, due the leak of free disk space.',\n                    stack: input.stack,\n                });\n        }\n\n        return new AuthupError({\n            status: InternalServerErrorOptions.status,\n            code: InternalServerErrorOptions.code,\n            message: input.message,\n            stack: input.stack,\n        });\n    }\n\n    return new AuthupError({\n        status: InternalServerErrorOptions.status,\n        code: InternalServerErrorOptions.code,\n    });\n}\n"],"mappings":";;;;;;AAmBA,SAAgBY,cAAcC,OAAc;AACxC,KAAIA,iBAAiBR,YACjB,QAAOQ;AAGX,KAAIA,iBAAiBP,0BACjB,QAAO,IAAID,YAAY;EACnBS,QAAQd,uBAAuBc;EAC/BC,MAAMf,uBAAuBe;EAC7BC,SAASH,MAAMG;EACfC,OAAOJ,MAAMI;EACjB,CAAA;AAGJ,KAAIT,eAAeK,MAAAA,EAAQ;EACvB,MAAMK,QAAQL,MAAMM,OAAOC,KAAKC,UAAUZ,cAAcY,MAAMC,KAAI,CAAA;EAClE,MAAMC,QAAQ,IAAIlB,YAAY;GAC1BS,QAAQd,uBAAuBc;GAC/BC,MAAMf,uBAAuBe;GAC7BE,OAAOJ,MAAMI;GACbD,SAASH,MAAMG,WAAWT,+BAA+BW,MAAAA;GAC7D,CAAA;AAEAK,QAAMJ,OAAOK,KAAI,GAAIX,MAAMM,OAAM;AACjC,SAAOI;;AAGX,KAAIV,iBAAiBX,UACjB,QAAO,IAAIG,YAAY;EACnBS,QAAQD,MAAMC;EACdC,MAAMF,MAAME;EACZC,SAASH,MAAMG;EACfC,OAAOJ,MAAMI;EACjB,CAAA;AAGJ,KAAIN,SAASE,MAAAA,EAAQ;;;IASjB,SARaH,eAAeG,OAAO,OAAA,IACnC,OAAOA,MAAME,SAAS,WAClBF,MAAME,OACNU,KAAAA,GAKJ;GACI,KAAK;GACL,KAAK;GACL,KAAK,2BACD,QAAO,IAAIpB,YAAY;IACnBS,QAAQb,qBAAqBa;IAC7BC,MAAMd,qBAAqBc;IAC3BC,SAAS;IACTC,OAAOJ,MAAMI;IACjB,CAAA;GAEJ,KAAK,eACD,QAAO,IAAIZ,YAAY;IACnBS,QAAQX,gCAAgCW;IACxCC,MAAMZ,gCAAgCY;IACtCC,SAAS;IACTC,OAAOJ,MAAMI;IACjB,CAAA;;AAGR,SAAO,IAAIZ,YAAY;GACnBS,QAAQV,2BAA2BU;GACnCC,MAAMX,2BAA2BW;GACjCC,SAASH,MAAMG;GACfC,OAAOJ,MAAMI;GACjB,CAAA;;AAGJ,QAAO,IAAIZ,YAAY;EACnBS,QAAQV,2BAA2BU;EACnCC,MAAMX,2BAA2BW;EACrC,CAAA"}
+{"version":3,"file":"error.mjs","names":["AuthupError","ErrorCode","codeFromHttpStatus","isAuthupError","isHTTPError","EntityRelationLookupError","buildErrorMessageForAttributes","isValidupError","stringifyPath","hasOwnProperty","isObject","sanitizeError","input","code","ENTITY_RELATION_INVALID","message","stack","paths","issues","map","issue","path","error","BAD_REQUEST","push","status","undefined","ENTITY_CONFLICT","STORAGE_INSUFFICIENT","INTERNAL_ERROR"],"sources":["../../src/utils/error.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { \n    AuthupError, \n    ErrorCode, \n    codeFromHttpStatus, \n    isAuthupError, \n} from '@authup/errors';\nimport { isHTTPError } from '@ebec/http';\nimport { EntityRelationLookupError } from 'typeorm-extension';\nimport { buildErrorMessageForAttributes, isValidupError, stringifyPath } from 'validup';\nimport { hasOwnProperty, isObject } from '@authup/kit';\n\n/**\n * Normalize an unknown error to an AuthupError. Recognised shapes:\n *\n * 1. AuthupError instance              → returned as-is\n * 2. EntityRelationLookupError         → BAD_REQUEST AuthupError\n * 3. validup Issue error               → BAD_REQUEST AuthupError carrying issues\n * 4. foreign @ebec/http HTTPError      → AuthupError with the closest semantic code\n * 5. driver error w/ a recognised code → ENTITY_CONFLICT or STORAGE_INSUFFICIENT\n * 6. anything else                     → INTERNAL_ERROR AuthupError\n *\n * The HTTP-status concern is handled separately by `httpStatusFromCode` in\n * the adapter — this function only assigns a semantic `code`.\n */\nexport function sanitizeError(input: unknown): AuthupError {\n    if (isAuthupError(input)) {\n        return input;\n    }\n\n    if (input instanceof EntityRelationLookupError) {\n        return new AuthupError({\n            code: ErrorCode.ENTITY_RELATION_INVALID,\n            message: input.message,\n            stack: input.stack,\n        });\n    }\n\n    if (isValidupError(input)) {\n        const paths = input.issues.map((issue) => stringifyPath(issue.path));\n        const error = new AuthupError({\n            code: ErrorCode.BAD_REQUEST,\n            stack: input.stack,\n            message: input.message || buildErrorMessageForAttributes(paths),\n        });\n\n        error.issues.push(...input.issues);\n        return error;\n    }\n\n    if (isHTTPError(input)) {\n        return new AuthupError({\n            code: codeFromHttpStatus(input.status),\n            message: input.message,\n            stack: input.stack,\n        });\n    }\n\n    if (isObject(input)) {\n        const code = hasOwnProperty(input, 'code') &&\n        typeof input.code === 'string' ?\n            input.code :\n            undefined;\n\n        /**\n         * @see https://dev.mysql.com/doc/mysql-errors/8.0/en/server-error-reference.html\n         */\n        switch (code) {\n            case '23505':\n            case 'ER_DUP_ENTRY':\n            case 'SQLITE_CONSTRAINT_UNIQUE': {\n                return new AuthupError({\n                    code: ErrorCode.ENTITY_CONFLICT,\n                    message: 'An entry with some unique attributes already exists.',\n                    stack: input.stack as string | undefined,\n                });\n            }\n            case 'ER_DISK_FULL':\n                return new AuthupError({\n                    code: ErrorCode.STORAGE_INSUFFICIENT,\n                    message: 'No database operation possible, due to the lack of free disk space.',\n                    stack: input.stack as string | undefined,\n                });\n        }\n\n        return new AuthupError({\n            code: ErrorCode.INTERNAL_ERROR,\n            message: input.message as string | undefined,\n            stack: input.stack as string | undefined,\n        });\n    }\n\n    return new AuthupError({ code: ErrorCode.INTERNAL_ERROR });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;GA+BA,SAAgBW,cAAcC,OAAc;CACxC,IAAIT,cAAcS,KAAAA,GACd,OAAOA;CAGX,IAAIA,iBAAiBP,2BACjB,OAAO,IAAIL,YAAY;EACnBa,MAAMZ,UAAUa;EAChBC,SAASH,MAAMG;EACfC,OAAOJ,MAAMI;CACjB,CAAA;CAGJ,IAAIT,eAAeK,KAAAA,GAAQ;EACvB,MAAMK,QAAQL,MAAMM,OAAOC,KAAKC,UAAUZ,cAAcY,MAAMC,IAAI,CAAA;EAClE,MAAMC,QAAQ,IAAItB,YAAY;GAC1Ba,MAAMZ,UAAUsB;GAChBP,OAAOJ,MAAMI;GACbD,SAASH,MAAMG,WAAWT,+BAA+BW,KAAAA;EAC7D,CAAA;EAEAK,MAAMJ,OAAOM,KAAI,GAAIZ,MAAMM,MAAM;EACjC,OAAOI;CACX;CAEA,IAAIlB,YAAYQ,KAAAA,GACZ,OAAO,IAAIZ,YAAY;EACnBa,MAAMX,mBAAmBU,MAAMa,MAAM;EACrCV,SAASH,MAAMG;EACfC,OAAOJ,MAAMI;CACjB,CAAA;CAGJ,IAAIN,SAASE,KAAAA,GAAQ;;;KASjB,QARaH,eAAeG,OAAO,MAAA,KACnC,OAAOA,MAAMC,SAAS,WAClBD,MAAMC,OACNa,KAAAA,GAKJ;GACI,KAAK;GACL,KAAK;GACL,KAAK,4BACD,OAAO,IAAI1B,YAAY;IACnBa,MAAMZ,UAAU0B;IAChBZ,SAAS;IACTC,OAAOJ,MAAMI;GACjB,CAAA;GAEJ,KAAK,gBACD,OAAO,IAAIhB,YAAY;IACnBa,MAAMZ,UAAU2B;IAChBb,SAAS;IACTC,OAAOJ,MAAMI;GACjB,CAAA;EACR;EAEA,OAAO,IAAIhB,YAAY;GACnBa,MAAMZ,UAAU4B;GAChBd,SAASH,MAAMG;GACfC,OAAOJ,MAAMI;EACjB,CAAA;CACJ;CAEA,OAAO,IAAIhB,YAAY,EAAEa,MAAMZ,UAAU4B,eAAe,CAAA;AAC5D"}

package/dist/utils/host.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"host.mjs","names":["toPublicHost","input"],"sources":["../../src/utils/host.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport function toPublicHost(input: string) {\n    if (input === '0.0.0.0' || input === '::') {\n        return 'localhost';\n    }\n\n    return input;\n}\n"],"mappings":";AAOA,SAAgBA,aAAaC,OAAa;AACtC,KAAIA,UAAU,aAAaA,UAAU,KACjC,QAAO;AAGX,QAAOA"}
+{"version":3,"file":"host.mjs","names":["toPublicHost","input"],"sources":["../../src/utils/host.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport function toPublicHost(input: string) {\n    if (input === '0.0.0.0' || input === '::') {\n        return 'localhost';\n    }\n\n    return input;\n}\n"],"mappings":";AAOA,SAAgBA,aAAaC,OAAa;CACtC,IAAIA,UAAU,aAAaA,UAAU,MACjC,OAAO;CAGX,OAAOA;AACX"}

package/dist/utils/self-id.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"self-id.mjs","names":["isSelfToken","id"],"sources":["../../src/utils/self-id.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport function isSelfToken(id: string) {\n    return id === '@me' ||\n        id === '@self';\n}\n"],"mappings":";AAOA,SAAgBA,YAAYC,IAAU;AAClC,QAAOA,OAAO,SACVA,OAAO"}
+{"version":3,"file":"self-id.mjs","names":["isSelfToken","id"],"sources":["../../src/utils/self-id.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport function isSelfToken(id: string) {\n    return id === '@me' ||\n        id === '@self';\n}\n"],"mappings":";AAOA,SAAgBA,YAAYC,IAAU;CAClC,OAAOA,OAAO,SACVA,OAAO;AACf"}

package/dist/utils/url.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"url.mjs","names":["resolveURL","base","relative","normalized","endsWith","stripped","startsWith","slice","URL","href"],"sources":["../../src/utils/url.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\n/**\n * Resolve a relative path against a base URL while preserving the base's path\n * component. The native `new URL(relative, base)` treats a base without a\n * trailing slash as a file, so `new URL('token', 'https://example.com/api')`\n * collapses to `https://example.com/token` — wrong for deployments mounted\n * under a path prefix. This helper guarantees the prefix is preserved by\n * appending a trailing slash to the base when it is missing.\n */\nexport function resolveURL(base: string, relative: string): string {\n    const normalized = base.endsWith('/') ? base : `${base}/`;\n    const stripped = relative.startsWith('/') ? relative.slice(1) : relative;\n    return new URL(stripped, normalized).href;\n}\n"],"mappings":";;;;;;;;GAeA,SAAgBA,WAAWC,MAAcC,UAAgB;CACrD,MAAMC,aAAaF,KAAKG,SAAS,IAAA,GAAOH,OAAO,GAAGA,KAAK;CACvD,MAAMI,WAAWH,SAASI,WAAW,IAAA,GAAOJ,SAASK,MAAM,EAAA,GAAKL;AAChE,QAAO,IAAIM,IAAIH,UAAUF,WAAAA,CAAYM"}
+{"version":3,"file":"url.mjs","names":["resolveURL","base","relative","normalized","endsWith","stripped","startsWith","slice","URL","href"],"sources":["../../src/utils/url.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\n/**\n * Resolve a relative path against a base URL while preserving the base's path\n * component. The native `new URL(relative, base)` treats a base without a\n * trailing slash as a file, so `new URL('token', 'https://example.com/api')`\n * collapses to `https://example.com/token` — wrong for deployments mounted\n * under a path prefix. This helper guarantees the prefix is preserved by\n * appending a trailing slash to the base when it is missing.\n */\nexport function resolveURL(base: string, relative: string): string {\n    const normalized = base.endsWith('/') ? base : `${base}/`;\n    const stripped = relative.startsWith('/') ? relative.slice(1) : relative;\n    return new URL(stripped, normalized).href;\n}\n"],"mappings":";;;;;;;;GAeA,SAAgBA,WAAWC,MAAcC,UAAgB;CACrD,MAAMC,aAAaF,KAAKG,SAAS,GAAA,IAAOH,OAAO,GAAGA,KAAK;CACvD,MAAMI,WAAWH,SAASI,WAAW,GAAA,IAAOJ,SAASK,MAAM,CAAA,IAAKL;CAChE,OAAO,IAAIM,IAAIH,UAAUF,UAAAA,EAAYM;AACzC"}

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@authup/server-core",
     "type": "module",
-    "version": "1.0.0-beta.41",
+    "version": "1.0.0-beta.42",
     "description": "This is a standalone application.",
     "license": "Apache-2.0",
     "main": "dist/index.mjs",
@@ -67,28 +67,26 @@
     },
     "homepage": "https://github.com/authup/authup#readme",
     "dependencies": {
-        "@authup/access": "^1.0.0-beta.41",
-        "@authup/core-http-kit": "^1.0.0-beta.41",
-        "@authup/core-kit": "^1.0.0-beta.41",
-        "@authup/errors": "^1.0.0-beta.41",
-        "@authup/kit": "^1.0.0-beta.41",
-        "@authup/server-kit": "^1.0.0-beta.41",
-        "@authup/specs": "^1.0.0-beta.41",
-        "@ebec/http": "^4.0.0",
+        "@authup/access": "^1.0.0-beta.42",
+        "@authup/core-http-kit": "^1.0.0-beta.42",
+        "@authup/core-kit": "^1.0.0-beta.42",
+        "@authup/errors": "^1.0.0-beta.42",
+        "@authup/kit": "^1.0.0-beta.42",
+        "@authup/server-kit": "^1.0.0-beta.42",
+        "@authup/specs": "^1.0.0-beta.42",
+        "@ebec/http": "^4.1.0",
         "@hapic/oauth2": "^3.2.0",
-        "@routup/assets": "^4.1.0",
-        "@routup/basic": "^2.1.0",
-        "@routup/cors": "^1.0.1",
-        "@routup/decorators": "^4.1.0",
-        "@routup/logger": "^1.0.0",
-        "@routup/prometheus": "^3.1.0",
-        "@routup/rate-limit": "^3.1.0",
-        "@routup/swagger-ui": "^3.1.0",
-        "@trapi/metadata": "^2.0.0-beta.4",
-        "@trapi/swagger": "^2.0.0-beta.4",
+        "@routup/assets": "^4.2.0",
+        "@routup/basic": "^2.2.0",
+        "@routup/cors": "^1.1.0",
+        "@routup/decorators": "^4.2.0",
+        "@routup/logger": "^1.1.0",
+        "@routup/prometheus": "^3.2.0",
+        "@routup/rate-limit": "^3.2.0",
+        "@routup/swagger-ui": "^3.2.0",
         "@validup/adapter-validator": "^0.3.2",
         "@validup/adapter-zod": "^0.2.4",
-        "better-sqlite3": "^12.8.0",
+        "better-sqlite3": "^12.10.0",
         "citty": "^0.2.2",
         "confinity": "^1.0.0-beta.1",
         "dotenv": "^17.4.1",
@@ -105,21 +103,22 @@
         "pg": "^8.20.0",
         "rapiq": "^0.9.0",
         "reflect-metadata": "^0.2.2",
-        "routup": "^5.0.1",
+        "routup": "^5.1.1",
         "singa": "^1.1.0",
         "smob": "^1.6.1",
         "tsyringe": "^4.10.0",
-        "typeorm": "^0.3.28",
+        "typeorm": "0.3.28",
         "typeorm-extension": "^3.9.0",
         "uncrypto": "^0.1.3",
         "validup": "^0.2.2",
         "zod": "^4.4.3"
     },
     "devDependencies": {
-        "@authup/client-web-kit": "^1.0.0-beta.41",
+        "@authup/client-web-kit": "^1.0.0-beta.42",
+        "@authup/server-test-kit": "^1.0.0-beta.42",
         "@faker-js/faker": "^10.4.0",
         "@fortawesome/fontawesome-free": "^7.2.0",
-        "@trapi/cli": "^0.1.2-beta.3",
+        "@trapi/cli": "^2.0.0",
         "@types/ldapjs": "^3.0.6",
         "@types/supertest": "^7.2.0",
         "@vitejs/plugin-vue": "^6.0.5",
@@ -141,10 +140,10 @@
         "testcontainers": "^11.14.0",
         "ts-node": "^10.8.2",
         "unplugin-swc": "^1.5.9",
-        "vite": "^8.0.9",
+        "vite": "^8.0.12",
         "vitest": "^4.0.14",
-        "vue": "^3.5.32",
-        "vue-router": "^5.0.4"
+        "vue": "^3.5.34",
+        "vue-router": "^5.0.7"
     },
     "publishConfig": {
         "access": "public"

package/dist/core/entities/actor/index.d.ts

@@ -1,2 +0,0 @@
-export * from './types.ts';
-//# sourceMappingURL=index.d.ts.map

package/dist/core/entities/actor/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/actor/index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC"}

package/dist/core/entities/actor/types.d.ts

@@ -1,7 +0,0 @@
-import type { IPermissionEvaluator } from '@authup/access';
-import type { Identity } from '@authup/core-kit';
-export type ActorContext = {
-    permissionEvaluator: IPermissionEvaluator;
-    identity?: Identity;
-};
-//# sourceMappingURL=types.d.ts.map

package/dist/core/entities/actor/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/actor/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEjD,MAAM,MAAM,YAAY,GAAG;IACvB,mBAAmB,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACvB,CAAC"}

package/dist/core/entities/service.d.ts

@@ -1,6 +0,0 @@
-import type { ActorContext } from './actor/types.ts';
-export declare abstract class AbstractEntityService {
-    protected isActorMasterRealmMember(actor: ActorContext): boolean;
-    protected getActorRealmId(actor: ActorContext): string | undefined;
-}
-//# sourceMappingURL=service.d.ts.map

package/dist/core/entities/service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/core/entities/service.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,8BAAsB,qBAAqB;IACvC,SAAS,CAAC,wBAAwB,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO;IAahE,SAAS,CAAC,eAAe,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,GAAG,SAAS;CAgBrE"}

package/dist/core/entities/service.mjs

@@ -1,21 +0,0 @@
-import { REALM_MASTER_NAME } from "@authup/core-kit";
-import { isObject } from "@authup/kit";
-//#region src/core/entities/service.ts
-var AbstractEntityService = class {
-	isActorMasterRealmMember(actor) {
-		if (!actor.identity) return false;
-		const { data } = actor.identity;
-		if ("realm" in data && data.realm && typeof data.realm === "object" && "name" in data.realm) return data.realm.name === REALM_MASTER_NAME;
-		return false;
-	}
-	getActorRealmId(actor) {
-		if (!actor.identity) return;
-		const { data } = actor.identity;
-		if (data.realm_id) return data.realm_id;
-		if ("realm" in data && isObject(data.realm) && "id" in data.realm) return data.realm.id;
-	}
-};
-//#endregion
-export { AbstractEntityService };
-
-//# sourceMappingURL=service.mjs.map

package/dist/core/entities/service.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"service.mjs","names":["REALM_MASTER_NAME","isObject","AbstractEntityService","isActorMasterRealmMember","actor","identity","data","realm","name","getActorRealmId","undefined","realm_id","id"],"sources":["../../../src/core/entities/service.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { REALM_MASTER_NAME } from '@authup/core-kit';\nimport { isObject } from '@authup/kit';\nimport type { ActorContext } from './actor/types.ts';\n\nexport abstract class AbstractEntityService {\n    protected isActorMasterRealmMember(actor: ActorContext): boolean {\n        if (!actor.identity) {\n            return false;\n        }\n\n        const { data } = actor.identity;\n        if ('realm' in data && data.realm && typeof data.realm === 'object' && 'name' in data.realm) {\n            return data.realm.name === REALM_MASTER_NAME;\n        }\n\n        return false;\n    }\n\n    protected getActorRealmId(actor: ActorContext): string | undefined {\n        if (!actor.identity) {\n            return undefined;\n        }\n\n        const { data } = actor.identity;\n        if (data.realm_id) {\n            return data.realm_id;\n        }\n\n        if ('realm' in data && isObject(data.realm) && 'id' in data.realm) {\n            return data.realm.id;\n        }\n\n        return undefined;\n    }\n}\n"],"mappings":";;;AAWA,IAAsBE,wBAAtB,MAAsBA;CACRC,yBAAyBC,OAA8B;AAC7D,MAAI,CAACA,MAAMC,SACP,QAAO;EAGX,MAAM,EAAEC,SAASF,MAAMC;AACvB,MAAI,WAAWC,QAAQA,KAAKC,SAAS,OAAOD,KAAKC,UAAU,YAAY,UAAUD,KAAKC,MAClF,QAAOD,KAAKC,MAAMC,SAASR;AAG/B,SAAO;;CAGDS,gBAAgBL,OAAyC;AAC/D,MAAI,CAACA,MAAMC,SACP;EAGJ,MAAM,EAAEC,SAASF,MAAMC;AACvB,MAAIC,KAAKK,SACL,QAAOL,KAAKK;AAGhB,MAAI,WAAWL,QAAQL,SAASK,KAAKC,MAAK,IAAK,QAAQD,KAAKC,MACxD,QAAOD,KAAKC,MAAMK"}

package/dist/core/entities/types.d.ts

@@ -1,22 +0,0 @@
-import type { ObjectLiteral } from '@authup/kit';
-import type { PaginationParseOutput } from 'rapiq';
-export type EntityRepositoryFindManyResult<T> = {
-    data: T[];
-    meta: PaginationParseOutput & {
-        total: number;
-    };
-};
-export interface IEntityRepository<T extends ObjectLiteral = ObjectLiteral> {
-    findMany(query: Record<string, any>): Promise<EntityRepositoryFindManyResult<T>>;
-    findOneById(id: string): Promise<T | null>;
-    findOneByName(name: string, realm?: string): Promise<T | null>;
-    findOneByIdOrName(idOrName: string, realm?: string): Promise<T | null>;
-    findManyBy(where: Record<string, any>): Promise<T[]>;
-    findOneBy(where: Record<string, any>): Promise<T | null>;
-    create(data: Partial<T>): T;
-    merge(entity: T, data: Partial<T>): T;
-    save(entity: T): Promise<T>;
-    remove(entity: T): Promise<void>;
-    validateJoinColumns(data: Partial<T>): Promise<void>;
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/core/entities/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/entities/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,OAAO,CAAC;AAEnD,MAAM,MAAM,8BAA8B,CAAC,CAAC,IAAI;IAC5C,IAAI,EAAE,CAAC,EAAE,CAAC;IACV,IAAI,EAAE,qBAAqB,GAAG;QAC1B,KAAK,EAAE,MAAM,CAAA;KAChB,CAAA;CACJ,CAAC;AAEF,MAAM,WAAW,iBAAiB,CAC9B,CAAC,SAAS,aAAa,GAAG,aAAa;IAEvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC,CAAC,CAAC,CAAC;IAEjF,WAAW,CAAC,EAAE,EAAE,MAAM,GAAI,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAE5C,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAI,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAEhE,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAEvE,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IAErD,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAEzD,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAE5B,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAEtC,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAE5B,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxD"}

package/dist/core/oauth2/helpers/erorr.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"erorr.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/helpers/erorr.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,WAAW,EAAmB,MAAM,eAAe,CAAC;AAI7D;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAI,WAAW,CAiBxD"}

package/dist/core/oauth2/helpers/erorr.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"erorr.mjs","names":["OAuth2Error","OAuth2ErrorCode","AuthupError","sanitizeError","toOAuth2Error","err","source","message","code","status","data","error","INVALID_REQUEST","error_description"],"sources":["../../../../src/core/oauth2/helpers/erorr.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport { OAuth2Error, OAuth2ErrorCode } from '@authup/specs';\nimport { AuthupError } from '@authup/errors';\nimport { sanitizeError } from '../../../utils/index.ts';\n\n/**\n * Transforms an unknown error to an OAuth2Error.\n *\n * @param err\n */\nexport function toOAuth2Error(err: unknown) : OAuth2Error {\n    if (err instanceof OAuth2Error) {\n        return err;\n    }\n\n    const source : AuthupError = err instanceof AuthupError ? err : sanitizeError(err);\n\n    return new OAuth2Error({\n        message: source.message,\n        code: source.code,\n        status: source.status,\n        data: {\n            error: OAuth2ErrorCode.INVALID_REQUEST,\n            error_description: source.message,\n            ...(source.data ?? {}),\n        },\n    });\n}\n"],"mappings":";;;;;;;;;GAgBA,SAAgBI,cAAcC,KAAY;AACtC,KAAIA,eAAeL,YACf,QAAOK;CAGX,MAAMC,SAAuBD,eAAeH,cAAcG,MAAMF,cAAcE,IAAAA;AAE9E,QAAO,IAAIL,YAAY;EACnBO,SAASD,OAAOC;EAChBC,MAAMF,OAAOE;EACbC,QAAQH,OAAOG;EACfC,MAAM;GACFC,OAAOV,gBAAgBW;GACvBC,mBAAmBP,OAAOC;GAC1B,GAAID,OAAOI,QAAQ,EAAE;GACzB;EACJ,CAAA"}